CVE-2020-35564

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-02-16

Last modified

2024-08-04

Weaknesses

CWE-74

Affected products

• Mbconnect24 (Mbconnectline)
• Mymbconnect24 (Mbconnectline)

References

• https://cert.vde.com/de-de/advisories/vde-2021-003
• https://mbconnectline.com/security-advice/